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Zsigmondy’s theorem is a by few known theorem that often proves useful in various num- 
ber theory problems. In this article we give an elementary proof of Zsigmondy’s theorem. 


Zsigmondy’s theorem. Let a,b € N such that gcd(a,b) = 1 andn€N, n>1. There 
exists a prime divisor of a" — b” that does not divide a® — b* for all k € {1,2,...,n—1}, 
except in the following cases: 


a? =1°. 
en=2 anda+b is a power of 2. 


Such a prime divisor is called a primitive prime divisor of a” — b”. Note that 2 can never 
be a primitive prime divisor. 


The theorem was discovered by Zsigmondy in 1892 and independently rediscovered by 
Birkhoff and Vandiver in 1904. The special case where b = 1 was discovered earlier by 
Bang in 1886. 

The proof we present is mainly a reformulation of Birkhoff and Vandivers proof, which 
was published in 1904, see [1]. [1, Theorem 1] is nowadays, among Olympiad enthousiasts, 
known as a case of the Lifting The Exponent Lemma. Here we present this Lemma as 
Lemma 5, for a proof we refer to [4]. We give a shorter proof of [1, Theorem 5], using 
some properties of cyclotomic polynomials. The most important properties are restated 
here, a more detailed version with proofs is to be found in [2]. Case 3 in the third part 
of the proof given here is a generalisation of its source of inspiration, namely [3, Key 
Lemma]. 


1 Prerequisites 


Before proving the main theorem we present some elementary properties of cyclotomic 
polynomials. The proofs can be found in [2]. 
Let ®,,(2) denote the n-th cyclotomic polynomial. 


Theorem 1. Let p be a prime number. If the polyomial x” —1 has a double root modulo 
p, that is, there exists an integer a and a polynomial f(a) € Zia] for which 


x" —1=(x—a)’f(x) (mod p), 


then p | n. 
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Theorem 2. [fn is a positive integer, then 


x” -1= [|] (2) (1) 
d| 


and 


&, (2) = [f(t — 1. (2) 


d\n 


Here a negative exponent in the right hand side of (2) has to be interpreted as a division 
of polynomials. 


Theorem 3. Let p be a prime number and n, k be positive integers. Then 


6,(c”") —ifp|n 
@4n (2) = ®,, (2?) : 
@, (a) if p{n. 


In particular we have that ®,x,,(a) | ®,,(a”) for all a € Z. 


Theorem 4. Let n be a positive integer and a be any integer. Then every prime divisor 
p of ®,(a) either satisfies p= 1 (mod n) or p|n. 


There are three more Lemmas that will be useful. 


Lemma 5. Let x and y be integers, let n be a positive integer, and let p be an odd prime 
such that p| x —y and none of x and y is divisible by p. Then 


Vp(z" — y") = Up(x — y) + v,(n). 


Here v,(a) denotes the highest integer exponent k such that p* | a. We also write p* || a. 
We will refer to this as the Lifting The Exponent Lemma. 


Lemma 6. Let p be prime, n = p%q € Z such that p{ q. The integer zeroes of ®, modulo 
p have order q modulo p. 


Proof. 
From p | ®,(a) we certainly have p | a” — 1 = a4 — 1, so k = ord,(a) exists and k | g. 
Because (theorem 3) ®,,(a) | ®,(a?") = ®,(a) (mod p) we have that p | ®,(a). 

If k < q there would be a divisor d | k for which p | ®g(a) (a consequence of (1)). As 
d|qandd < q this means the polynomial x? — 1 = nq ®,(x) has a double root, a, 
modulo p due to a factor ®g(x)®,(x). From theorem 1 we would obtain that p | g, which 
is impossible. Therefore k = q. 


Lemma 7. [fn is a positive integer and x > 1 is a real number, then 
(x —1)° < (2) < (2 +1), 


where the first inequality becomes an equality only if n = 2. 


Proof. 

From the triangle inequality for complex numbers we have x — 1 < |x —¢| < x + 1 for 
any complex number ¢ with |¢| = 1. The first inequality is strict unless ¢ = 1, and the 
second is strict unless ¢ = —1. Applying this we obtain 


@=Im< |] e=d-@epe, 


eae 
ord(¢)=n 


with equality only if y(n) = 1, that is, n = 2. Note that the second inequality is always 
strict, because |x — 1] < |x +1]. The product in the middle is, by definition |®,(a)|. If 
x > 1 then from (2) we have ®,(x) > 0, hence |®,,(x)| = ®,(z). 


We are ready to prove Zsigmondy’s theorem. 


2 Proof of Zsigmondy’s theorem 


Fix two coprime positive integers a and b with a > b. 

It is sufficient to prove that a” — b” has a prime divisor that does not divide a* — b* for 
all positive divisors k | n. Indeed, if p | a” — 6”, c is an inverse of b modulo p and k is 
the smallest integer such that p | a* — b*, then k = ord,(ac) has to be a divisor of n, as 
(ac)" =1 (mod p). 


1. Connection to cyclotomic polynomials 


We define z,, = a” — b” and 
v, = [f22r. (3) 
d| 


Because Z, = 0” ((2)" — 1), from (1) and (2) we have that 


Vn = dM, (F) (4) 
b 
and 
= []%. (5) 
d|n 
If z, = pj’ ---p%” where p,,,..., Ps, are the primitive prime divisors of z,, we set 


ti =p.0 pst 
From (4) we have W,, € Z and from (3) it follows that P, | V,, because the only z, for 
which gced(P,,, z,) > 1 is Zn, by definition of P,. Let UV, = A,P,. We will prove that 
P, > 1 in the cases Zsigmondy’s theorem does not exclude. 


2. An upper bound on A, 

From (5) it follows that W,, | 2 for every positive divisor d | nm with d <n. 

Note that gced(An, Pn) = 1, because »,P, = Vn | Z, and by definition P, contains all 
primitive divisors of z,, so A, can not be a multiple of a prime which divides P,. 

Let p be a prime divisor of V,, such that p | A, so p is not primitive. We will prove that 
p|n. Let d <n such that p | zg. 


If p = 2, then from theorem 4 we have 2 | n, at least ifn > 1. Suppose p is odd. If p{n 
then by the Lifting The Exponent Lemma, vp(%n) = vp(za) so p { 22, a contradiction to 
W,, | #. Hence rad(\,) | n. 

Suppose ,, > 1. If p is a prime divisor of A, with p® || n and n = p%q, then from theorem 
3 we have 


p| Un | W,(a”", bP’) =, (mod p), 


where more generally we denote 


W,(z,y) = y°,, (=) ’ 
y 


This means if p is a prime divisor of \,, then p | Vy. From theorem 4 we obtain that 
p =1 (mod q), because p{ q by our assumption. So p > q = = 
If r is another prime divisor of n, then r | g, so r < q < p. This means p is uniquely 
determined as the largest prime divisor of n. 

Therefore, set \,, = p’®. We will prove that 6 = 1 if n > 2, and treat the case n = 2 


seperately. 


If n = 2, a? — b? obviously has a primitive prime divisor (any odd prime dividing a + b) 
unless a+ } is a power of 2, an exception mentioned in the theorem. 


If p = 2 we have that n is a power of 2. Then V,, = a? +b2, a and b odd. Modulo 4 this 
is congruent to 2, which implies 6 = 1. 

Suppose p > 2. Let d| mn such that p | zg. Let c be an inverse of b modulo p, then p | V, 
and thus p | ®(ac), so by lemma 6, ord,(ac) = qg. So certainly we should have gq | d. 

Now from (3) we have 6 = vp(Wn) = Up(Zn) — Up(zn), because the only factors that do 
not vanish due to the exponent p(d) and contain a factor p are z, and zx. By the Lifting 
The Exponent Lemma, ( = 1. ‘ 


3. A lower bound on P,, 
In this part of the proof we exploit the result of Lemma 7. We consider three cases. 


Case 1: A, = 1 
If \, = 1, then P, = V, > (a — 6)? > 1. The inequality is strict unless n = 2 and 
a—b=1, but then Zsigmondy’s theorem is trivially true. 


Case 2: An =panda—b>1 
In this case P,, = oun > t(a=—b)e™ > _ > 1. Again the inequality is strict unless 
a—b=2 and n = 2, which has already been treated. 


Case 3: An = panda—b=1 

Suppose the inequality P, > 1 is not strict, so V, = p. This will eventually give us the 
only counterexample that’s left, being n = 6, a = 2. 

From p | 2, it follows that p is odd. Let n = p%q. 

Ifa > 1, then p = V, = V,,(a”* , b**), but 


because p > 2, contradiction. Hence n = pq. Now we have 


WU, (a, b?) s (a? — pr)? : aP — bP s (2? — 1)b . ap 
VU, (a + bj) a+b 2b+1 3 
This is impossible when p > 3, so p = 3. Since q < p the only cases to consider are n = 3 

and n = 6. 

If n = 3 the theorem is obviously true because a? — b? = (a—b)(a?+ab+b’) anda—b=1. 
The case n = 6 remains, and indeed Zsigmondy fails here. From 3 = Vg = a? — ab +0? 
we easily deduce that a = 2 and b=a—1=1. 


— 


3 Applications 


In this section we present some elementary applications of Zsigmondy’s theorem. We 
start with a similar theorem for sums of nth powers. 


Zsigmondy’s theorem for sums. Let a,b € N such that gcd(a,b) = 1 andn EN, 
n> 1. There exists a prime divisor of a” + b” that does not divide a* + b* for all 
k € {1,2,...,n—1}, except for the case 2° + 13. 

Proof. 

This is an immediate consequence of Zsigmondy’s theorem. For any positive integer n > 1 
for which 2n does not give an exception on Zsigmondy’s theorem, a?” —b?” has a primitive 
prime divisor p, dividing a” — b” or a” + b”. 

Because p is primitive, p does not divide a” — b". Thus p | a” + b” and p { a* — b?* for 
all k <n. This implies that p | a* + b* for all k < n. 


Note that the exception 2° — 1° is reflected in 2? + 1°. The case n = 2 and a+ b a power 
of 2 disappears because we only consider n > 1 here. 


We give a few examples where Zsigmondy’s theorem can be used. 
Example 1. Find all positive integers a,n > 1 and k for which 3* —1= a". 


Solution. 

Because —1 is not a quadratic residue modulo 3, we have that n is odd. From a+1 | a"+1 
we have that 3|a+4+1. Ifa 42 orn 43, a” +1 has a prime divisor different from 3, 
which means a” + 1 cannot be a power of 3. 

The only remaining case is a = 2 and n = 3, giving the only solution (a,n,k) = (2,3, 2). 


Example 2. (IMO Shortlist 2002) Let pi, p2,..-,Pn be distinct primes greater than 3. 
Show that 2?1”2"P» +. 1 has at least 4” divisors. 


Solution. 

Let a = pip2:-- py and b = 2% +1. It is sufficient to prove that b has at least 2n prime 
divisors. This is indeed true, because Zsigmondy’s theorem for sums says that as 3 { a, 
2¢+ 1 introduces a new prime for every divisor d | a. As a has 2” divisors, b has at least 
2” prime divisors, which is much bigger than the required 2n. 


In fact, we have the following general result: 


Theorem 8. Let a,b,n be positive integers such that 3 { n and gcd(a,b) = 1. Then 
t(a" +b") > 2™™), If n is odd anda—b>1, then Tr(a” — b") > 27™, 


Here 7 counts the number of positive divisors. The proof is analoguous to the solution 
of example 2. The conditions for the inequalites can be weakened by studying in which 
cases at + b¢ does not contain a primitive prime divisor, for some d | n. 
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